move db username and password to env variables